Static task
static1
Behavioral task
behavioral1
Sample
64783c19c3c4ad2d66ea8905aebe7667_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
64783c19c3c4ad2d66ea8905aebe7667_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64783c19c3c4ad2d66ea8905aebe7667_JaffaCakes118
-
Size
272KB
-
MD5
64783c19c3c4ad2d66ea8905aebe7667
-
SHA1
3ad3de91f0729b9817d5afe3d0d388d5259f88b4
-
SHA256
a8fc5e1dc55c99eafe1a1ce5b84d063fc6287895e5ce8e0ad40a1fa4d4547ba8
-
SHA512
c7f38c6fa74b96eed80dac5ac147aa7407f02a8382062d5213bb6e39bdefd221ebb2f72d96aeef97d1dbc5935751da4ee511066914e1bf9f90f5c44e33326e0a
-
SSDEEP
6144:w9ige17CXPoBQfFMqIQ6sML6oXnuUEF9Gi2wCEJzHZZ:Bge17MoiaJJVX/in2wCEJL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64783c19c3c4ad2d66ea8905aebe7667_JaffaCakes118
Files
-
64783c19c3c4ad2d66ea8905aebe7667_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
XTcqK8FK Size: - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sh0Ocvhg Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
0QF90QYs Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BxfAgIOy Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qdGCilY2 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
0QF90QYs
-
BxfAgIOy
-
qdGCilY2
-
sh0Ocvhg